Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations IamaSherpa on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Blackberry Security Concerns... 1

Status
Not open for further replies.

OUCATS

IS-IT--Management
Feb 5, 2002
180
US
I am looking for any security concerns resolving around using a Blackberry in a business setting. I believe security concerns would be similar to that of a wireless laptop but I am curious what actual users are experiencing. I am especially concerned about business email and how it's handled on a Blackberry. Also, if the Blackberry is stolen, how much information (also email) could someone receive from the stolen Blackberry?

Any input is appreciated.

Thanks!
 
Blackberry is secure. However you will need a generic account in order for the BES server to connect to your exchange server. If the Blackberry is lost you will have the ability to "kill the device" from the console on your BES server. This will wipe the info on your device and reset it. If you know the serial number of your devices (which you should keep anyway) you can let your provider know and they can make sure that the device is locked for use.

I don't know what your budget is, but I would also suggest you look into Goodlink
 
dalv,

Thanks for replying. So if I am using my Blackberry to send and receive email (the email is stored on my Blackberry) and I loose my Blackberry, I can call the provider and have them "kill the device"? When this happens, what is deleted off of the Blackberry? After the device is killed, what can the person who stole it do with it and can the recreate any data that was previously on it?

The nice thing about the Blackberry is that it seems like data can be deleted after it's stolen unlike a laptop.

Thanks!
 
Hi Oucats,

Once you loose a Blackberry, you as Administrator, will be able to Kill the device. This will delete all the emails on the device.

You can also contact the provider to bar the device from being used again.

 
Everything said here is true, but there is a time delay involved here. I have had two users who left their handheld in a cab in NYC. It was not till they returned to the office that they reported it so the devices could be sent the kill command.

If the concern is physical security (as opposed to wireless security since hackers can steal anything, even a PIN message), then you should simply use the Security feature of the handheld. Fill out the Owner fields and have the handheld lock after X minutes (up to one hour(?)). If it is lost or stolen, the user has up to ten (10) attempts at guessing the password, after which the unit self-destructs (deletes all data on itself). Even if the original owner finds it again, they have to have their Blackberry admin reinstall the apps -- all data remains cleaned off.

 
To add some additonal information... In order to process the kill command I found out that the Blackberry has to 1.) be in the network coverage area and 2.) have it's wireless service running. So if someone was to steal a device and disable the wireless service, then they would have full access to the all of the information even if a kill command was sent.

So from everything I have read online and in this post (thanks dalv and Farscapefan) the best way to secure a Blackberry is to first enable the password feature and enable the handheld lock after x minutes and then manage any lost or stolen Blackberries through the kill command.

Thanks!
 
Hi,

sorry if the following question is not fully related to what you discussed here, but anyway it is a security concern.

Let's immagine the following scenario:

- user receives virus infected e-mail on its handheld device, but doesn't know about the virus

- user connects handheld to its desktop PC for synchronization

- infected mail and therefore virus gets into the corporate network and could cause damage

What about that?

Thanks for your comprehension, Paolo!
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top